obsidian-daily-review
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection by ingesting untrusted data from external sources.
- Ingestion points: The agent is instructed to read git commit messages and content from various markdown files within the Obsidian vault (SKILL.md).
- Boundary markers: There are no markers or delimiters defined to help the agent distinguish between instructions and data, nor are there warnings to ignore instructions embedded in the notes or commit messages.
- Capability inventory: The agent has the capability to execute shell commands (git) and perform file system read/write operations within the vault (SKILL.md).
- Sanitization: The skill does not implement sanitization, filtering, or validation of the text retrieved from the vault or git history before it enters the context.
Audit Metadata